Breach Autopsy: 23andMe Turns Credential Stuffing Into Genetic Data Governance
The 23andMe settlement turns credential stuffing into a governance test for genetic-data platforms.
identity-theft
The Docket: Gitea Docker Turned Proxy Trust Into Identity Bypass
Gitea's Docker image shows why identity headers need a verified trust boundary, not just a reverse proxy in front.
Explain This: Device Code Phishing Attacks and OAuth Abuse
Device code phishing surged 37x as attackers exploit OAuth's TV login flow to steal credentials without triggering MFA alerts.
The Docket: Okta Builds AI Agent Identity Management Before Someone Gets Sued
Okta just announced a framework for managing AI agent identities. Translation: companies are deploying agents without knowing who has access to what.